Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/3139302e3131352e38302e302f32322d3332203d3e20323730343535.roa
File:                     3139302e3131352e38302e302f32322d3332203d3e20323730343535.roa (raw, json)
Hash identifier:          2bBDYgQf8nTAhhQjODhPmAxlyFYGmNopgWfWRjwxPvM=
Subject key identifier:   9E:6C:9A:DF:2F:9D:D0:AB:61:07:BD:26:F2:E9:09:69:BA:45:85:90
Certificate issuer:       /CN=1FFC09601222C7FE79CEB6CD398C050C4627E992
Certificate serial:       26AB9C3AD0505536B4AC12DCB15A14387A7E6175
Authority key identifier: 1F:FC:09:60:12:22:C7:FE:79:CE:B6:CD:39:8C:05:0C:46:27:E9:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC09601222C7FE79CEB6CD398C050C4627E992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/3139302e3131352e38302e302f32322d3332203d3e20323730343535.roa
Signing time:             Thu 19 Mar 2026 19:28:51 +0000
ROA not before:           Thu 19 Mar 2026 19:23:51 +0000
ROA not after:            Thu 18 Mar 2027 19:28:51 +0000
asID:                     270455
IP address blocks:        190.115.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/1FFC09601222C7FE79CEB6CD398C050C4627E992.crl
                          rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/1FFC09601222C7FE79CEB6CD398C050C4627E992.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC09601222C7FE79CEB6CD398C050C4627E992.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ab:9c:3a:d0:50:55:36:b4:ac:12:dc:b1:5a:14:38:7a:7e:61:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FFC09601222C7FE79CEB6CD398C050C4627E992
        Validity
            Not Before: Mar 19 19:23:51 2026 GMT
            Not After : Mar 18 19:28:51 2027 GMT
        Subject: CN=9E6C9ADF2F9DD0AB6107BD26F2E90969BA458590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:30:8e:74:1a:4c:f0:b5:5f:24:fd:47:74:
                    db:26:db:c8:6c:b8:10:b9:f5:7f:4f:89:03:fe:04:
                    9c:dc:a1:f9:e1:20:6a:0d:c5:3b:d3:cf:4d:74:38:
                    66:ae:9b:c8:63:d3:37:e5:f6:ba:3d:22:ba:24:de:
                    60:05:b2:bd:32:01:3d:28:8e:11:63:77:c7:dc:76:
                    95:df:22:1a:22:07:9a:f1:39:db:d7:8d:d5:1d:28:
                    92:d1:c8:09:e8:50:51:9d:16:2a:ff:55:35:e7:91:
                    4d:87:e0:36:6b:10:32:6a:d5:be:be:30:63:b9:66:
                    a2:81:4e:1c:b9:f1:5a:e4:7f:10:a4:e0:97:58:a6:
                    06:e9:a3:07:86:a0:72:84:10:dd:c8:b5:16:ee:91:
                    ed:46:05:f6:cb:6a:f7:30:01:b3:f5:89:87:29:ad:
                    18:79:e1:a1:19:3e:17:c3:28:d5:7b:21:5c:d9:9f:
                    8d:ba:99:96:60:13:62:4d:30:87:e5:a3:6b:bc:f0:
                    65:dd:4b:8e:72:53:09:3f:d8:19:f8:87:8f:5b:57:
                    f5:01:d6:32:cf:e5:d3:64:07:f8:c4:ad:c3:33:cd:
                    c4:d4:3f:4d:9a:ff:74:91:0b:3e:d7:11:26:60:fb:
                    2f:33:bb:04:ed:8b:de:58:4b:ca:ec:a8:5c:0f:15:
                    5a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6C:9A:DF:2F:9D:D0:AB:61:07:BD:26:F2:E9:09:69:BA:45:85:90
            X509v3 Authority Key Identifier:
                keyid:1F:FC:09:60:12:22:C7:FE:79:CE:B6:CD:39:8C:05:0C:46:27:E9:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/1FFC09601222C7FE79CEB6CD398C050C4627E992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FFC09601222C7FE79CEB6CD398C050C4627E992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHEiUf2K55x5coW6BHpySWGMZdm6qKDeF1HXWmqjVpL8/0/3139302e3131352e38302e302f32322d3332203d3e20323730343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:d3:14:78:bd:86:98:5a:6a:7f:f7:03:d6:ac:df:61:00:52:
         bd:dd:a8:f0:63:95:f3:99:84:8e:7d:ec:6b:ad:ab:93:32:fe:
         df:c2:05:bc:62:92:ee:29:d1:86:43:25:af:55:2b:65:7f:e2:
         63:99:83:90:39:e6:94:66:67:e5:a3:1b:83:24:37:19:e4:35:
         f0:d7:38:00:1b:e3:ed:3d:77:f5:ea:ae:e2:15:1a:7c:84:59:
         44:e0:ec:90:a1:23:72:10:d4:62:8d:de:24:47:50:65:fb:71:
         78:63:1d:21:c5:4f:2d:54:12:79:6d:4b:29:86:91:41:97:db:
         c7:76:88:39:e3:5c:89:b4:0f:10:7b:7a:05:c9:5e:f7:80:35:
         60:4b:ff:34:6a:4e:d4:e4:10:60:20:98:70:d4:11:22:6f:61:
         44:b1:31:e9:18:f1:d8:a3:ef:a6:13:76:5d:24:90:43:c6:7d:
         26:9b:a5:85:84:d7:2e:67:0e:11:f4:40:b2:df:90:39:68:dc:
         ed:0a:cb:94:72:f3:13:e9:6c:ab:fe:ea:11:20:67:77:0a:76:
         c0:48:c3:1f:0a:e6:d9:a2:12:81:c1:86:c1:30:3b:b2:84:f7:
         d2:8d:17:a5:21:90:fc:04:68:77:df:e4:df:b0:11:d6:ef:ea:
         56:14:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:08:42 2026 by rpki-client